Yesterday, Sumit Siddarth (Sid) from notsosecure.com released a new version of the sql injection tool bsqlbf. This updated version bsqlbf 2.2 supports now SQL Injection in „order by“ and „group by“.
bsqlbf supports Oracle, MSSQL, MySQL and Postgres.